Vulnerabilidades em WordPress
36 resultadosAnálise Vexday
WordPress apresenta 33 vulnerabilidades catalogadas, das quais 2 foram publicadas recentemente (últimos 90 dias), sem evidências atuais de exploração em massa. A fraqueza dominante é Cross-Site Scripting (CWE-79), com apenas 2 falhas críticas, indicando um perfil de risco moderado onde a maioria das exposições permanece de baixa a média severidade.
CVE-2026-63030CRITICALWordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code ExecutionEPSS 98.4%KEVCVE-2022-21661HIGHSQL injection in WordPressEPSS 97.8%CVE-2021-29447HIGHWordPress Authenticated XXE attack when installation is running PHP 8EPSS 85.7%CVE-2026-60137MEDIUMWordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_QueryEPSS 79.0%KEVCVE-2022-21662HIGHStored XSS in WordPressEPSS 64.5%CVE-2020-11027MEDIUMPassword reset links invalidation issue in WordPressEPSS 13.6%CVE-2023-5561MEDIUMWordPress < 6.3.2 - Unauthenticated Post Author Email DisclosureEPSS 3.9%CVE-2022-21664HIGHSQL injection in WordPressEPSS 3.8%CVE-2022-21663MEDIUMAuthenticated Object Injection in Multisites in WordPressEPSS 3.7%CVE-2020-4047MEDIUMAuthenticated XSS via media attachment page in WordPressEPSS 3.2%CVE-2022-3590MEDIUMWP <= 6.1.1 - Unauthenticated Blind SSRF via DNS RebindingEPSS 3.1%CVE-2024-31211MEDIUMRemote Code Execution in `WP_HTML_Token`EPSS 2.8%CVE-2020-4049LOWAuthenticated self-XSS via theme uploads in WordPressEPSS 2.5%CVE-2020-11028MEDIUMUnauthenticated disclosure of certain private posts in WordPressEPSS 2.3%CVE-2020-4046MEDIUMAuthenticated XSS through embed block in WordPressEPSS 2.2%CVE-2021-29476CRITICALInsecure Deserialization of untrusted data in rmccue/requestsEPSS 2.1%CVE-2020-11029MEDIUMCross-site scripting in stats method (object cache) in WordPressEPSS 2.1%CVE-2021-29450MEDIUMWordPress Authenticated disclosure of password-protected posts and pagesEPSS 2.1%CVE-2020-11026HIGHSpecially crafted filenames in WordPress leading to XSSEPSS 2.1%CVE-2021-39200MEDIUMInformation Disclosure in wp_die() via JSONP in wordpressEPSS 2.0%